Moaluko vulnerabilities
We track 2 vulnerabilities in Moaluko products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 24, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Moaluko vulnerabilities
- 7.5 High severity
Store Locator: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in moaluko Store Locator store-locator allows PHP Local File Inclusion.This issue affects Store Locator: from n/a through <= 3.98.10.
- 9.8 Critical severity
Store Locator for WordPress with Google Maps –…: Improper Control of Filename for Include/Require Statement in PHP Program
The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary f